$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/d248c914-4f04-3feb-ad16-42e406369dfd.roa File: d248c914-4f04-3feb-ad16-42e406369dfd.roa (raw, json) Hash identifier: x7xtEq6XO9vl/d39hLwlOsFYcXY/vozmY9VR1buXjOI= Subject key identifier: E2:BA:DD:25:41:7E:31:1E:1C:79:41:CD:0A:D7:9D:74:F7:50:86:7A Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584F03A76D7A72BC364A08A97780 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/d248c914-4f04-3feb-ad16-42e406369dfd.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 212071 IP address blocks: 23.147.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:6d:7a:72:bc:36:4a:08:a9:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3af32e5a-81e1-404f-953f-f2c471cb96d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a7:9e:29:ea:e0:14:20:c7:e9:4f:1f:1b:99: 13:5a:b6:69:4a:a0:68:a8:83:cd:c2:4a:d5:62:be: b3:dc:7f:ff:c9:ec:c4:8c:2d:e2:b7:63:49:48:dd: a8:01:1a:c6:d9:f9:33:6f:f0:db:f9:bd:3b:2b:93: 2b:45:59:41:3c:24:90:ec:6e:a9:b4:d9:05:b9:83: 51:bf:92:b3:d3:17:1b:11:18:e0:fb:3d:1a:d3:d0: 82:86:15:36:bf:6b:dd:98:d3:d7:40:4a:08:3e:6a: 2c:d4:b9:0f:d1:ca:de:ca:c7:fe:df:03:a5:1b:5f: 3f:79:14:28:fa:6e:33:35:ff:4c:52:0e:3a:28:a1: 85:ae:b4:3d:5e:08:11:25:c8:a8:c6:fe:61:d4:17: 9a:7e:0c:70:80:0f:6c:9f:14:04:a2:31:e9:57:4f: e7:e1:eb:27:b3:21:fd:80:6c:eb:a3:a3:ba:e3:8c: 4b:82:97:91:f3:21:3a:6a:a1:7d:e1:9a:42:3c:55: ce:b4:1d:6d:a0:ac:74:39:17:f6:26:c3:01:84:69: ff:c4:f4:6a:d6:c0:c3:b9:b1:95:d4:f1:e2:b2:bc: f9:5a:78:a1:37:f8:cd:37:06:ee:b3:32:e9:c8:de: c2:98:24:88:ad:ce:dd:43:ce:a4:08:65:58:45:38: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:DD:25:41:7E:31:1E:1C:79:41:CD:0A:D7:9D:74:F7:50:86:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/d248c914-4f04-3feb-ad16-42e406369dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:11:05:66:ab:1e:a2:1d:3f:d2:5a:43:75:bb:31:8a:bd:a4: fb:3e:b5:10:b0:80:fd:1f:2a:c8:f4:8e:ae:ad:47:94:d5:97: fe:e3:d4:24:4c:21:fb:22:cb:83:75:13:ba:c9:5c:de:d7:e4: 8b:6d:70:06:45:10:55:b8:2d:03:15:89:ce:75:4e:a4:0f:15: 06:07:60:a8:cc:cf:60:ca:89:5d:75:6f:7a:01:66:65:2f:25: f2:3f:ba:29:b6:11:31:e5:7d:1a:59:2e:18:99:3c:df:19:cf: 38:eb:b9:eb:31:c6:58:37:d7:a6:3a:5c:45:39:0a:16:eb:71: 6e:8e:56:0c:75:fe:54:cf:20:fb:be:b6:48:9d:ff:1e:84:4a: 11:b4:1f:c7:c1:b2:42:a8:dc:48:fb:46:f9:5e:a4:1c:2d:fc: 08:75:3b:c2:58:f3:7e:ae:a5:3c:89:81:1b:56:47:9d:03:6f: ab:a6:72:a0:91:b5:c0:ac:30:4c:87:37:34:8f:81:d2:2c:a5: a5:9b:c2:55:fd:8d:6f:61:5d:bd:17:65:e1:ae:a5:21:1e:12: 16:fc:c7:fc:27:df:aa:c2:ff:5a:cc:6f:1d:bf:70:e3:de:1a: a3:99:f7:9a:19:d4:00:5f:9f:7b:dc:17:2b:5d:33:a7:ca:c2: 2e:84:0c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp216crw2Sgipd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2FmMzJlNWEtODFlMS00MDRmLTk1M2YtZjJjNDcxY2I5NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6eeKergFCDH6U8fG5kTWrZpSqBoqIPNwkrV Yr6z3H//yezEjC3it2NJSN2oARrG2fkzb/Db+b07K5MrRVlBPCSQ7G6ptNkFuYNR v5Kz0xcbERjg+z0a09CChhU2v2vdmNPXQEoIPmos1LkP0creysf+3wOlG18/eRQo +m4zNf9MUg46KKGFrrQ9XggRJcioxv5h1BeafgxwgA9snxQEojHpV0/n4esnsyH9 gGzro6O644xLgpeR8yE6aqF94ZpCPFXOtB1toKx0ORf2JsMBhGn/xPRq1sDDubGV 1PHisrz5WnihN/jNNwbuszLpyN7CmCSIrc7dQ86kCGVYRTjrJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK63SVBfjEeHHlBzQrXnXT3UIZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvZDI0OGM5MTQtNGYwNC0z ZmViLWFkMTYtNDJlNDA2MzY5ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0RBWarHqIdP9JaQ3W7MYq9pPs+tRCwgP0fKsj0jq6tR5TVl/7j1CRM Ifsiy4N1E7rJXN7X5IttcAZFEFW4LQMVic51TqQPFQYHYKjMz2DKiV11b3oBZmUv JfI/uim2ETHlfRpZLhiZPN8Zzzjruesxxlg316Y6XEU5ChbrcW6OVgx1/lTPIPu+ tkid/x6EShG0H8fBskKo3Ej7RvlepBwt/Ah1O8JY836upTyJgRtWR50Db6umcqCR tcCsMEyHNzSPgdIspaWbwlX9jW9hXb0XZeGupSEeEhb8x/wn36rC/1rMbx2/cOPe GqOZ95oZ1ABfn3vcFytdM6fKwi6EDOM= -----END CERTIFICATE-----Generated at Tue Sep 22 05:41:51 2026 by rpki-client